[{"data":1,"prerenderedAt":1821},["ShallowReactive",2],{"sc:header-data-ko":3,"sc:footer-data-ko":489,"post-ko--posts-2026-03-01-exchange-ad-split-permissions-hardening-d948cda78b15d":519,"authors_data":1233,"content-ko-list-7b291c2dd91a4":1587,"authors_data:Thorsten Kunzi":1818},{"lang":4,"home":5,"navigation":17,"meta":479,"contact":485},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"ko":13},{"title":14,"url":15,"alt":16},"홈","/ko","glueckkanja Logo",[18,127,231,316,395,402],{"name":19,"languages":20,"children":24},"workplace",{"ko":21},{"title":22,"description":23},"Workplace","스마트하고 안전하며 유연한 워크스페이스를 위한 Microsoft 365 기반 솔루션으로, 최신 기술과 ID 서비스를 매끄럽게 통합합니다.",[25,55,91],{"name":26,"languages":27,"children":30},"portfolio",{"ko":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"ko":34},{"title":35,"url":36},"Managed Intune","/ko/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"ko":40},{"title":41,"url":42},"Managed Entra","/ko/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"ko":46},{"title":47,"url":48},"Managed Workplace","/ko/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"ko":52},{"title":53,"url":54},"Consulting Services","/ko/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"ko":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,85],{"name":62,"languages":63},"microsoft-entra-suite",{"ko":64},{"title":65,"url":66},"Microsoft Entra Suite","/ko/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"ko":70},{"title":71,"url":72},"Microsoft Intune","/ko/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"ko":76},{"title":77,"url":78},"Microsoft Windows","/ko/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{"ko":82},{"title":83,"url":84},"Windows 365 Cloud PC","/ko/workplace/windows365-cloud-pc",{"name":86,"languages":87},"cloud-workplace-foundation",{"ko":88},{"title":89,"url":90},"Cloud Workplace Foundation","/ko/workplace/cloud-workplace-foundation",{"name":92,"languages":93,"children":96},"microsoft-365-collaboration",{"ko":94},{"title":95},"Microsoft 365 Collaboration",[97,103,109,115,121],{"name":98,"languages":99},"microsoft-copilot",{"ko":100},{"title":101,"url":102},"Microsoft 365 Copilot","/ko/workplace/microsoft-365-copilot",{"name":104,"languages":105},"microsoft-teams",{"ko":106},{"title":107,"url":108},"Teams","/ko/workplace/microsoft-teams",{"name":110,"languages":111},"sharepoint-powerplatform",{"ko":112},{"title":113,"url":114},"SharePoint & Power Platform","/ko/workplace/sharepoint-power-platform",{"name":116,"languages":117},"exchange-online",{"ko":118},{"title":119,"url":120},"Exchange Online","/ko/workplace/exchange-online",{"name":122,"languages":123},"information-protection-compliance",{"ko":124},{"title":125,"url":126},"Information Protection & Compliance","/ko/workplace/information-protection-compliance",{"name":128,"languages":129,"children":133},"azure",{"ko":130},{"title":131,"description":132},"Azure","Azure로 성장을 가속하세요: IaaS와 PaaS를 통해 클라우드 비용을 절감하고 효율을 높이며 혁신을 추진합니다.",[134,151,181],{"name":135,"languages":136,"children":138},"azure-portfolio",{"ko":137},{"title":29},[139,145],{"name":140,"languages":141},"azure-managed-services",{"ko":142},{"title":143,"url":144},"Azure Managed Services","/ko/azure/azure-managed-services",{"name":146,"languages":147},"azure-consulting",{"ko":148},{"title":149,"url":150},"Azure Consulting","/ko/azure/azure-consulting",{"name":152,"languages":153,"children":156},"azure-scenarios",{"ko":154},{"title":155},"시나리오",[157,163,169,175],{"name":158,"languages":159},"plan-your-cloud",{"ko":160},{"title":161,"url":162},"클라우드 계획","/ko/azure/plan-your-cloud",{"name":164,"languages":165},"migrate-to-the-cloud",{"ko":166},{"title":167,"url":168},"클라우드로 마이그레이션","/ko/azure/migrate-to-the-cloud",{"name":170,"languages":171},"innovate-your-business",{"ko":172},{"title":173,"url":174},"비즈니스 혁신","/ko/azure/innovate-your-business",{"name":176,"languages":177},"vmware-exit",{"ko":178},{"title":179,"url":180},"VMware 전략 재검토","/ko/azure/vmware-exit",{"name":182,"languages":183,"children":186},"azure-practices",{"ko":184},{"title":185},"Practices",[187,193,199,202,208,213,219,225],{"name":188,"languages":189},"azure-foundation",{"ko":190},{"title":191,"url":192},"Azure Foundation","/ko/azure/azure-foundation",{"name":194,"languages":195},"azure-ai-foundation",{"ko":196},{"title":197,"url":198},"Azure AI Foundation","/ko/azure/azure-ai-foundation",{"name":86,"languages":200},{"ko":201},{"title":89,"url":90},{"name":203,"languages":204},"azure-data-foundation",{"ko":205},{"title":206,"url":207},"Azure Data Foundation","/ko/azure/azure-data-foundation",{"name":188,"languages":209},{"ko":210},{"title":211,"url":212},"Azure Container Foundation","/ko/azure/azure-container-foundation",{"name":214,"languages":215},"dark-tenant",{"ko":216},{"title":217,"url":218},"Managed Dark Tenant","/ko/azure/managed-dark-tenant",{"name":220,"languages":221},"azure-cloud-adoption-framework",{"ko":222},{"title":223,"url":224},"Cloud Adoption Framework","/ko/azure/cloud-adoption-framework",{"name":226,"languages":227},"azure-cloud-competence-center",{"ko":228},{"title":229,"url":230},"Cloud Competence Center","/ko/azure/cloud-competence-center",{"name":232,"languages":233,"children":242},"security",{"ko":234},{"title":235,"description":236,"emergency":237},"보안","수상 경력의 24/7 매니지드 서비스, 인시던트 대응, 최신 인프라 보호로 클라우드를 지킵니다.",{"text":238,"href":239,"skin":240,"icon":241},"공격을 받고 있나요?","/ko/security/are-you-under-attack","primary","emergency",[243,268,289],{"name":244,"children":245},"security-security-consulting",[246,252,256,262],{"name":247,"languages":248},"managed-red-tenant",{"ko":249},{"title":250,"url":251},"Managed Red Tenant","/ko/security/managed-red-tenant",{"name":214,"languages":253},{"ko":254},{"title":255,"url":218},"Dark Tenant",{"name":257,"languages":258},"sentinel-data-lake",{"ko":259},{"title":260,"url":261},"Sentinel Data Lake","/ko/security/sentinel-data-lake",{"name":263,"languages":264},"security-consulting",{"ko":265},{"title":266,"url":267},"Security Consulting","/ko/security/security-consulting",{"name":269,"children":270},"security-cloud-security-operations-center",[271,277,283],{"name":272,"languages":273},"cloud-security-operations-center",{"ko":274},{"title":275,"url":276},"Cloud Security Operations Center","/ko/security/cloud-security-operations-center",{"name":278,"languages":279},"global-secure-access",{"ko":280},{"title":281,"url":282},"Global Secure Access","/ko/security/global-secure-access",{"name":284,"languages":285},"my-work-id",{"ko":286},{"title":287,"url":288},"MyWorkID","/ko/security/my-work-id",{"name":290,"children":291},"security-preventive-services",[292,298,304,310],{"name":293,"languages":294},"preventive-services",{"ko":295},{"title":296,"url":297},"Preventive Services","/ko/security/preventive-services",{"name":299,"languages":300},"data-security-services",{"ko":301},{"title":302,"url":303},"Data Security Service","/ko/security/data-security-service",{"name":305,"languages":306},"security-copilot-agents",{"ko":307},{"title":308,"url":309},"Security Copilot Agents","/ko/security/security-copilot-agents",{"name":311,"languages":312},"nis2",{"ko":313},{"title":314,"url":315},"NIS2 이행","/ko/security/red-dark-tenant-nis2",{"name":317,"languages":318,"children":322},"products",{"ko":319},{"title":320,"description":321},"제품","완전히 안전한 100% 클라우드 네이티브 Microsoft 환경을 위한 혁신적인 제품군으로, 협업과 네트워크 인증, 소프트웨어 관리를 강화합니다.",[323,360],{"name":324,"products":325,"children":326},"lorem ipsum 1",true,[327,336,344,352],{"name":328,"img":329,"target":330,"languages":331},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"ko":332},{"title":333,"url":334,"subtitle":335},"RealmJoin","https://www.realmjoin.com","클라우드 기반 소프트웨어 배포",{"name":337,"img":338,"target":330,"languages":339},"scepman","products/scepman/scepman-nav-logo.svg",{"ko":340},{"title":341,"url":342,"subtitle":343},"SCEPman","https://www.scepman.com","클라우드에서 인증서 배포",{"name":345,"img":346,"target":330,"languages":347},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"ko":348},{"title":349,"url":350,"subtitle":351},"KONNEKT","https://www.konnekt.io","Office 365 데이터를 로컬에서 활용",{"name":353,"img":354,"target":330,"languages":355},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"ko":356},{"title":357,"url":358,"subtitle":359},"RealMigrator","https://www.realmigrator.com","서버 간 데이터 마이그레이션",{"name":361,"products":325,"children":362},"lorem ipsum 2",[363,371,379,387],{"name":364,"img":365,"target":330,"languages":366},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"ko":367},{"title":368,"url":369,"subtitle":370},"TerraProvider","https://www.terraprovider.com","Microsoft 365용 Terraform Provider",{"name":372,"img":373,"target":330,"languages":374},"radiusaas","products/radius/radius-nav-logo.svg",{"ko":375},{"title":376,"url":377,"subtitle":378},"RADIUSaaS","https://www.radius-as-a-service.com","네트워크 인증",{"name":380,"img":381,"target":330,"languages":382},"unifiedcontacts","products/unified-contacts/unifiedcontact-nav-logo.svg",{"ko":383},{"title":384,"url":385,"subtitle":386},"Unified Contacts","https://www.unified-contacts.com","Microsoft Teams에서 연락처 찾기",{"name":388,"img":389,"target":330,"languages":390},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"ko":391},{"title":392,"url":393,"subtitle":394},"Autopilot Monitor","https://www.autopilotmonitor.com","실시간 Windows Autopilot 모니터링",{"name":396,"languages":397},"casestudies",{"ko":398},{"title":399,"url":400,"description":401},"고객 사례","/ko/casestudies","클라우드의 선구자: Blueprint 기반 접근 방식과 Infrastructure-as-Code 전문성을 갖춘, 포괄적인 클라우드 솔루션을 위한 최고의 Microsoft 파트너입니다.",{"name":403,"languages":404,"children":407},"company",{"ko":405},{"title":406,"description":401},"회사",[408,438,462],{"name":409,"languages":410,"children":413},"company-about-us",{"ko":411},{"title":412},"회사 소개",[414,420,426,432],{"name":415,"languages":416},"company-facts-figures",{"ko":417},{"title":418,"url":419},"주요 현황","/ko/company/facts-and-figures",{"name":421,"languages":422},"company-contact",{"ko":423},{"title":424,"url":425},"연락처 및 위치","/ko/company/contact-and-locations",{"name":427,"languages":428},"switzerland",{"ko":429},{"title":430,"url":431}," glueckkanja 스위스","/ko/company/switzerland",{"name":433,"languages":434},"austria",{"ko":435},{"title":436,"url":437},"glueckkanja 오스트리아","/ko/company/austria",{"name":439,"languages":440,"children":443},"company-career",{"ko":441},{"title":442},"채용",[444,450,456],{"name":445,"languages":446},"company-career-overview",{"ko":447},{"title":448,"url":449},"채용 안내","/ko/career",{"name":451,"languages":452},"company-young-professionals",{"ko":453},{"title":454,"url":455},"Young Professionals","/ko/young-professionals",{"name":457,"languages":458},"company-jobs",{"ko":459},{"title":460,"url":461},"채용 공고","/ko/job-offers",{"name":463,"languages":464,"children":467},"company-latest",{"ko":465},{"title":466},"최신 소식",[468,474],{"name":469,"languages":470},"company-blog",{"ko":471},{"title":472,"url":473},"블로그","/ko/blog",{"name":469,"languages":475},{"ko":476},{"title":477,"url":478},"이벤트","/ko/events",[480],{"name":481,"languages":482},"career-meta",{"ko":483},{"title":442,"url":449,"active":484},false,{"languages":486},{"ko":487},{"title":488,"url":425,"active":484},"문의",{"data":490},{"bgColor":491,"number":492,"mail":493,"brandLogos":494,"logos":495,"links":499,"linksKo":509},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[496],{"img":10,"alt":16,"url":497,"class":498},"index.html","max-w-19rem",[500,503,506],{"title":501,"url":502},"Datenschutz","/de/privacy",{"title":504,"url":505},"Impressum","/de/imprint",{"title":507,"url":508},"No Cookies","/de/cookies",[510,513,516],{"title":511,"url":512},"개인정보 처리방침","/ko/privacy",{"title":514,"url":515},"법적 고지","/ko/imprint",{"title":517,"url":518},"쿠키 없음","/ko/cookies",{"id":520,"title":521,"author":522,"body":524,"cta":494,"description":1190,"eventid":494,"extension":1205,"hideInRecent":484,"layout":1206,"meta":1207,"moment":1211,"navigation":325,"path":1229,"seo":1230,"stem":1231,"tags":494,"webcast":484,"__hash__":1232},"content_ko/posts/2026-03-01-exchange-ad-split-permissions-hardening.md","후회 없는 Exchange AD Split Permissions",[523],"Thorsten Kunzi",{"type":525,"value":526,"toc":1189},"minimal",[527,532,536,543,549,568,571,578,583,587,596,611,617,620,625,661,685,689,697,706,711,727,731,737,742,747,808,813,850,853,857,868,875,891,903,907,910,956,959,968,977,980,995,1012,1025,1037,1042,1101,1105,1110,1130,1137,1161,1164,1167,1170,1185],[528,529,531],"h2",{"id":530},"tldr-단점을-없앤다면","TLDR: 단점을 없앤다면?",[533,534,535],"p",{},"저는 Exchange 사용자, 그룹, 연락처가 위치한 바로 그 지점에 AD 및 RBAC 권한을 직접 다시 부여하는 방법을 찾았습니다. 이 방법은 관리자나 ID 관리 시스템에 아무런 변경도 요구하지 않습니다. 제 경험상 바로 이 마찰이 대부분의 기업에서 도입을 가로막는 주요 원인이었습니다. 그러면서도 측면 이동(lateral movement)과 도메인 장악에 대한 보안 이점은 그대로 유지됩니다.",[533,537,538],{},[539,540],"img",{"alt":541,"src":542},"Active Directory","https://res.cloudinary.com/c4a8/image/upload/v1770991330/blog/pics/Blog_-_Exchange_AD_Split_Permissions_-_1.png",[533,544,545],{},[546,547,548],"strong",{},"세 단계로 이루어집니다:",[550,551,553,562,565],"ol",{"style":552},"margin: 0.25rem 0",[554,555,556,561],"li",{},[557,558,560],"a",{"href":559},"https://learn.microsoft.com/en-us/exchange/permissions/split-permissions/configure-exchange-for-split-permissions#switch-to-active-directory-split-permissions","AD split permission 모델"," 구현",[554,563,564],{},"Exchange 서버에 잃어버린 AD 권한을 부여하되, 관련 OU에만 부여",[554,566,567],{},"누락된 PowerShell cmdlet을 다시 활성화하기 위해 Exchange RBAC 부여",[533,569,570],{},"모두 Microsoft의 가이드, AD ACL 또는 Exchange RBAC 할당을 통해 이루어집니다.",[572,573],"video-frame",{"thumb":574,"alt":575,"id":576,":full-width":577},"/thumbs/thumb-exchange-ad-split-permissions-webcast.jpg","발표자가 노트북 앞에 앉아 glueckkanja의 Step 1: Active Directory Permissions라는 제목의 슬라이드를 설명하고 있습니다. 슬라이드는 위임 그룹을 만드는 PowerShell 명령(New-ADGroup, Add-ADGroupMember)과 Add-ExchangeADSplitPermissionOnOU.ps1 스크립트를 통해 권한을 적용하는 방법 등 Microsoft Exchange AD Split Permissions를 구현하는 방법을 다룹니다.","soNZkNRopSQ","true",[579,580,582],"div",{"style":581},"background:var(--color-gk-light-grey); margin-top:0.5rem; padding:0.5rem 1rem; font-size:0.85rem; color:var(--color-gk-dark-blue)","웹캐스트: 후회 없는 Exchange AD Split Permissions. 단계별 구현 가이드",[528,584,586],{"id":585},"왜-지금-중요한가","왜 지금 중요한가?",[533,588,589,590,593,595],{},"이 모델은 Exchange 2010 SP1에서 도입된 이후 대부분 간과되거나 무시되어 왔습니다. 하지만 기본값인 공유 권한(shared permissions) 모델은 Active Directory 장악이라는 큰 보안 위험을 내포합니다. 지난 몇 년간 Exchange가 원격 익스플로잇으로 악명 높았던 점까지 고려하면, 이제 행동에 나설 때입니다!",[591,592],"br",{},[591,594],{},"\n문제는 도메인 루트에 부여된 권한이 도메인 전체로 상속된다는 점에서 비롯됩니다.",[597,598,599,602,605,608],"ul",{"style":552},[554,600,601],{},"사용자 및 그룹에 대한 권한 수정 (사실상 전체 액세스)",[554,603,604],{},"그룹 구성원 수정",[554,606,607],{},"사용자 암호 재설정",[554,609,610],{},"사용자 및 그룹 생성/삭제",[533,612,613],{},[539,614],{"alt":615,"src":616},"Permissions","https://res.cloudinary.com/c4a8/image/upload/v1770991330/blog/pics/Blog_-_Exchange_AD_Split_Permissions_-_2.png",[533,618,619],{},"AdminSDHolder 프로세스(admincount=1 특성)로 보호되는 것은 일부 고권한 Tier 0 사용자와 그룹뿐이며, 많은 환경에서는 도메인 또는 포리스트(forest) 장악을 허용하거나 최소한 심각한 영향을 초래할 수 있는 보호되지 않은 사용자나 그룹이 존재합니다.",[533,621,622],{},[546,623,624],{},"대표적인 예시:",[597,626,627,630,650],{"style":552},[554,628,629],{},"Password Hash Sync를 사용할 때의 Entra Connect Sync 계정",[554,631,632,633],{},"기본 그룹",[597,634,636,639,647],{"style":635},"margin: 0",[554,637,638],{},"Entra Connect 계정과 결합된 Allowed RODC Password Replication Group(실제 Windows RODC가 존재하는 경우)",[554,640,641,642,646],{},"더 많은 경로를 보여주는 ",[557,643,645],{"href":644,"target":330},"https://specterops.io/blog/2025/06/25/untrustworthy-trust-builders-account-operators-replicating-trust-attack-aorta","Untrustworthy Trust Builders: Account Operators Replicating Trust Attack (AORTA) - SpecterOps","도 참고하세요(Account Operators 그룹도 유사한 위협입니다)",[554,648,649],{},"보호를 제거해 공격 벡터를 만들기 위한 Protected Users 비우기",[554,651,652,653],{},"보호되지 않은 사용자 지정 그룹 또는 관리자/서비스 계정",[597,654,655,658],{"style":635},[554,656,657],{},"GPO에 대한 쓰기 권한(도메인 컨트롤러에 적용됨)",[554,659,660],{},"AD 백업, 백업 서버, PKI 템플릿, 하이퍼바이저 등에 대한 액세스 관리",[533,662,663,664,666,668,669,675,677,679,680],{},"이러한 현재와 미래의 모든 잠재적 경로를 사후에 억제하기란 매우 어렵습니다. _ADM 사용자 지정 OU의 경우 ACL 상속을 비활성화할 수 있지만, 대부분의 기본 개체는 기본 Builtin OU나 Users 컨테이너에서 이동할 수 없어 취약한 상태로 남습니다.",[591,665],{},[591,667],{},"\n루트에서 강력한 권한을 제거하는 편이 훨씬 낫고, 이는 Active Directory split permissions 모델을 구현함으로써 이루어집니다. ",[557,670,674],{"href":671,"rel":672},"https://learn.microsoft.com/en-us/exchange/permissions/split-permissions/configure-exchange-for-split-permissions",[673],"nofollow","Configure Exchange Server for split permissions | Microsoft Learn",[591,676],{},[591,678],{},"\n그리고 Microsoft도 이에 동의합니다: “…encouraged to implement Active Directory split permissions” ",[557,681,684],{"href":682,"rel":683},"https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/active-directory-hardening-series---part-7-%E2%80%93-implementing-least-privilege/4366626",[673],"Active Directory Hardening Series - Part 7 – Implementing Least Privilege | Microsoft Community Hub",[528,686,688],{"id":687},"그런데-왜-아무도-하지-않을까","그런데 왜 아무도 하지 않을까?",[533,690,691,692,694,696],{},"split permissions는 Exchange 2010 SP1이 나오기 전까지는 사용할 수 없었기 때문에, 그때쯤이면 이미 모두가 기존 방식을 받아들인 상태였고, 이 기능이 생긴 뒤에도 보안 팀이 이를 성공적으로 밀어붙이지 못한 것으로 보입니다.",[591,693],{},[591,695],{},"\n게다가 이 모델은 관리자 및 IDM 프로세스의 변경을 강제했을 것입니다. 예를 들어 사용자나 배포 목록을 먼저 AD에서 만든 다음에야 Exchange를 사용해 “mail enable”하는 식입니다.",[698,699,700],"blockquote",{},[533,701,702,705],{},[546,703,704],{},"Info:"," 다음 cmdlet은 더 이상 사용할 수 없거나 작동하지 않습니다: Add-DistributionGroupMember, New-DistributionGroup, New-Mailbox, New-MailContact, New-MailUser, New-RemoteMailbox, Remove-DistributionGroup, Remove-DistributionGroupMember, Remove-Mailbox, Remove-MailContact, Remove-MailUser, Remove-RemoteMailbox, Update-DistributionGroupMember, Add-ADPermission, Remove-ADPermission",[533,707,708],{},[546,709,710],{},"적용 예시:",[597,712,713,724],{"style":552},[554,714,715,716],{},"New-Mailbox(Exchange가 AD에 쓰는 작업)는 다음처럼 바뀝니다:",[597,717,718,721],{"style":635},[554,719,720],{},"New-ADUser(adm.jdoe가 AD에 쓰는 작업)",[554,722,723],{},"Enable-Mailbox",[554,725,726],{},"SendAs 권한을 위한 Add-ADPermission은 Active Directory 사용자 및 컴퓨터의 보안 탭에서 수행해야 하며, 일반 관리자에게는 추가 AD 권한이 필요한 경우가 많습니다.",[528,728,730],{"id":729},"후회-없는-방법을-알려드립니다","후회 없는 방법을 알려드립니다",[533,732,733,736],{},[546,734,735],{},"주의사항",": 다음 링크와 문서를 반드시 끝까지 읽고 이해한 뒤, 먼저 테스트 환경에서 수행하고, AD 백업이 최신 상태이며 복구 절차가 마련되어 있는지 확인하세요!",[738,739,741],"h3",{"id":740},"현재-사용-현황-감사","현재 사용 현황 감사",[533,743,744],{},[546,745,746],{},"먼저 영향을 받는 cmdlet 중 어떤 것이 어떤 OU에서 사용되고 있는지 확인해야 합니다:",[748,749,750,758,760,766,768],"code-block",{},[751,752,753,757],"span",{},[751,754,756],{"style":755},"color:var(--color-gk-orange)","$CsvPath"," = \"C:\\temp\\SplitPermissionAdminAuditLog.csv\"",[591,759],{},[751,761,762,765],{},[751,763,764],{"style":755},"$Cmdlets"," = \"Add-ADPermission\",\"Remove-ADPermission\",\"New-DistributionGroup\",\"Remove-DistributionGroup\",\"Add-DistributionGroupMember\",\"Update-DistributionGroupMember\",\"Remove-DistributionGroupMember\",\"New-Mailbox\",\"Remove-Mailbox\",\"New-RemoteMailbox\",\"Remove-RemoteMailbox\",\"New-MailUser\",\"Remove-MailUser\",\"New-MailContact\",\"Remove-MailContact\"",[591,767],{},[751,769,770,773,774,778,779,773,782,784,785,788,789,773,792,773,795,773,797,800,801,804,805],{},[751,771,772],{"style":755},"Search-AdminAuditLog"," ",[751,775,777],{"style":776},"color:var(--color-gk-mid-blue)","-ResultSize"," 99000 ",[751,780,781],{"style":776},"-Cmdlets",[751,783,764],{"style":755}," | ",[751,786,787],{"style":755},"Select-Object"," RunDate,Caller,ObjectModified,CmdletName,@{Name='CmdletParameters';Expression={[string]::join(\",\", ($\\_.CmdletParameters))}},succeeded,error | ",[751,790,791],{"style":755},"Export-Csv",[751,793,794],{"style":776},"-Path",[751,796,756],{"style":755},[751,798,799],{"style":776},"-Delimiter"," \";\" ",[751,802,803],{"style":776},"-Encoding"," Unicode ",[751,806,807],{"style":776},"-NoTypeInformation",[533,809,810],{},[546,811,812],{},"호출자(caller)와 cmdlet에 대한 빠른 분석:",[748,814,815,831,833,841,843],{},[751,816,817,820,821,773,824,773,826,773,828,830],{},[751,818,819],{"style":755},"$CSVs"," = ",[751,822,823],{"style":755},"Import-Csv",[751,825,794],{"style":776},[751,827,756],{"style":755},[751,829,799],{"style":776}," \";\"",[591,832],{},[751,834,835,784,837,840],{},[751,836,819],{"style":755},[751,838,839],{"style":755},"Group-Object"," Caller",[591,842],{},[751,844,845,784,847,849],{},[751,846,819],{"style":755},[751,848,839],{"style":755}," CmdletName",[533,851,852],{},"AD 권한이 어디에 필요할지 파악하기 위해 CSV를 분석하세요. 필요하다면 Exchange 관련 그룹을 모두 전용 OU로 옮겨 최적화할 수 있습니다.",[528,854,856],{"id":855},"split-permissions-모델-활성화","Split Permissions 모델 활성화",[533,858,859,860,864],{},"다음 문서에서 Microsoft의 지침 **\"Switch to Active Directory split permissions\"**를 따르세요:\n",[557,861,674],{"href":862,"rel":863},"https://learn.microsoft.com/en-us/exchange/configure-exchange-server-for-split-permissions",[673],[865,866,867],"em",{},"(RBAC split permissions가 아닙니다)",[533,869,870,871,874],{},"요컨대 이 작업은 ",[546,872,873],{},"\"Exchange Windows Permissions\""," 그룹의 위험한 권한을 제거하고, Exchange를 그룹 구성원에서도 제외합니다.",[748,876,877],{},[751,878,879,773,882,773,885,773,888],{},[751,880,881],{"style":755},"Setup.exe",[751,883,884],{"style":776},"/IAcceptExchangeServerLicenseTerms_DiagnosticDataOFF",[751,886,887],{"style":776},"/PrepareAD",[751,889,890],{"style":776},"/ActiveDirectorySplitPermissions:true",[579,892,894,895,897,898,902],{"style":893},"background:#f4f4f4; border-left:4px solid var(--color-gk-petrol); border-radius:0 6px 6px 0; padding:0.75rem 1rem; margin:1rem 0; font-size:0.88rem; color:#000520;","\n  ",[546,896,704],{}," 되돌리려면 ",[899,900,901],"code",{},"/ActiveDirectorySplitPermissions:false","를 사용하면 됩니다.\n",[738,904,906],{"id":905},"ad-권한-부여","AD 권한 부여",[533,908,909],{},"사용자 지정 AD 그룹을 만들고 Exchange 서버를 구성원으로 추가합니다.",[748,911,912,918,920,773,923,926,927,930,931,934,935,773,937,773,940,943,944,946,926,949,952,953],{},[751,913,914],{},[751,915,917],{"style":916},"color:var(--color-black-40)","# adjust OU Path first!",[591,919],{},[751,921,922],{"style":755},"New-ADGroup",[751,924,925],{"style":776},"-Name"," \"AD_Custom Exchange Split permissions replacement\" ",[751,928,929],{"style":776},"-GroupCategory"," Security ",[751,932,933],{"style":776},"-GroupScope"," DomainLocal ",[751,936,794],{"style":776},[546,938,939],{},"\"OU=Rights,OU=Groups,OU=T1,OU=_ADM,$((Get-ADDomain).DistinguishedName)\"",[751,941,942],{"style":776},"-Description"," \"replaces the permissions lost by split permissions on relevant OUs\"",[591,945],{},[751,947,948],{"style":755},"Add-ADGroupMember",[751,950,951],{"style":776},"-Members"," \"Exchange Trusted Subsystem\"\n",[751,954,955],{"style":916},"# reboot Exchange servers for permissions via group to work",[533,957,958],{},"저는 사용 사례별로 AD 권한 위임을 쉽게 할 수 있도록 스크립트를 만들었습니다.",[698,960,961],{},[533,962,963,964,967],{},"이 권한이 없으면 Exchange 서버는 AD로부터 ",[899,965,966],{},"“INSUFF_ACCESS_RIGHTS”"," 오류를 받게 됩니다.",[533,969,970,971,976],{},"glueckkanja GitHub에서 ",[557,972,975],{"href":973,"rel":974},"https://github.com/glueckkanja/code-snippets/blob/main/ExchangeADSplitPermission/Add-ExchangeADSplitPermissionOnOU.ps1",[673],"Add-ExchangeADSplitPermissionOnOU.ps1","을 다운로드하세요.",[533,978,979],{},"다음 PermissionType을 부여할 수 있습니다:",[533,981,983,986,988,989,991],{"style":982},"background:#f5f5f5;padding:0.5rem 1rem;margin:0.25rem 0;border-left:3px solid #d8d8d8;",[546,984,985],{},"CreateUserAndContact",[591,987],{},"사용자 및 연락처에 대한 생성/삭제, ResetPassword, WriteAllProperties",[591,990],{},[992,993,994],"small",{},"Exchange cmdlet: `New-Mailbox`, `New-RemoteMailbox`, `New-MailUser`, `New-MailContact` 및 이에 대응하는 `Remove-*`",[533,996,998,1001,1003,1004,1006],{"style":997},"background:#f5f5f5;padding:0.5rem 1rem;margin:0.25rem 0;border-left:3px solid #d8d8d8",[546,999,1000],{},"GroupManage",[591,1002],{},"그룹 생성/삭제, 구성원 수정",[591,1005],{},[992,1007,1008,1009,1011],{},"Exchange cmdlet: `New-DistributionGroup`, `Remove-DistributionGroup`, `Add-DistributionGroupMember`, `Update-DistributionGroupMember`, `Remove-DistributionGroupMember`",[591,1010],{},"또한: 사용자가 EAC를 통해 자신이 소유한 DistributionGroup을 관리",[533,1013,1014,1017,1019,1020,1022],{"style":997},[546,1015,1016],{},"UserSendAs",[591,1018],{},"사용자에 대한 AD 권한 수정",[591,1021],{},[992,1023,1024],{},"Exchange cmdlet: `Add-ADPermission`",[533,1026,1027,1030,1032,1033,1035],{"style":997},[546,1028,1029],{},"GroupSendAs",[591,1031],{},"그룹에 대한 AD 권한 수정",[591,1034],{},[992,1036,1024],{},[533,1038,1039],{},[546,1040,1041],{},"스크립트 사용 방법:",[748,1043,1044,773,1046,1049,1050,1053,1054,1057,1058,1061,1063,773,1065,1067,1068,1070,1071,1057,1073,773,1075,1067,1077,1079,1080,1057,1082,773,1084,1086,1087,1089,1090,1057,1092,773,1094,1086,1096,1098,1099,1057],{},[751,1045,975],{"style":755},[751,1047,1048],{"style":776},"-TargetOU"," \u003COU> ",[751,1051,1052],{"style":776},"-PermissionType"," \u003CGroupManage|UserSendAs|GroupSendAs|CreateUserAndContact> ",[751,1055,1056],{"style":776},"-Trustee"," \"AD_Custom Exchange Split permissions replacement\"\n",[751,1059,1060],{"style":916},"# For example",[591,1062],{},[751,1064,975],{"style":755},[751,1066,1048],{"style":776}," \"OU=ExchangeGroups,OU=HQ,OU=Alderaan,$((Get-ADDomain).DistinguishedName)\" ",[751,1069,1052],{"style":776}," GroupManage ",[751,1072,1056],{"style":776},[751,1074,975],{"style":755},[751,1076,1048],{"style":776},[751,1078,1052],{"style":776}," GroupSendAs ",[751,1081,1056],{"style":776},[751,1083,975],{"style":755},[751,1085,1048],{"style":776}," \"OU=Users,OU=HQ,OU=Alderaan,$((Get-ADDomain).DistinguishedName)\" ",[751,1088,1052],{"style":776}," UserSendAs ",[751,1091,1056],{"style":776},[751,1093,975],{"style":755},[751,1095,1048],{"style":776},[751,1097,1052],{"style":776}," CreateUserAndContact ",[751,1100,1056],{"style":776},[738,1102,1104],{"id":1103},"exchange-rbac-부여","Exchange RBAC 부여",[533,1106,1107],{},[546,1108,1109],{},"Add-DistributionGroupMember 및 Remove-DistributionGroupMember cmdlet에서 -BypassSecurityGroupManagerCheck 매개변수 다시 활성화:",[748,1111,1112],{},[751,1113,1114,773,1117,1119,1120,1123,1124,1126,1127,1129],{},[751,1115,1116],{"style":755},"New-RoleGroup",[751,1118,925],{"style":776}," \"SplitPermission Security Group Creation and Membership\" ",[751,1121,1122],{"style":776},"-Roles"," \"Security Group Creation and Membership\" ",[751,1125,951],{"style":776}," \"Organization Management\",\"Recipient Management\" ",[751,1128,942],{"style":776}," \"Brings back -BypassSecurityGroupManagerCheck to Add-DistributionGroupMember, but also needs AD ACL for Exchange Server on target DLs\"",[698,1131,1132],{},[533,1133,1134,1136],{},[546,1135,704],{}," 그렇지 않으면 “-BypassSecurityGroupManagerCheck parameter is not available” 또는 “You don't have sufficient permissions. This operation can only be performed by a manager of the group” 오류가 발생합니다.",[533,1138,1139,1141,1144,1146],{},[591,1140],{},[546,1142,1143],{},"필요한 매개변수와 함께 New-Mailbox, New-RemoteMailbox, New-MailContact, Remove-... cmdlet 다시 활성화:",[591,1145],{},[748,1147,1148,773,1150,1152,1153,1155,1156,1126,1158,1160],{},[751,1149,1116],{"style":755},[751,1151,925],{"style":776}," \"SplitPermission Mail Recipient Creation\" ",[751,1154,1122],{"style":776}," \"Mail Recipient Creation\" ",[751,1157,951],{"style":776},[751,1159,942],{"style":776}," \"Brings back New-Mailbox, New-RemoteMailbox, New-MailUser, New-MailContact and matching Remove-... cmdlets, but additionally Exchange needs AD ACL for Exchange Server on target OUs\"",[528,1162,1163],{"id":1163},"결론",[533,1165,1166],{},"이 가이드가 더 많은 조직이 Exchange를 통한 침해로부터 Active Directory를 보호하는 중요한 걸음을 내딛는 데 도움이 되길 바랍니다. 여러 고객사에 Exchange AD Split Permissions 모델을 구현한 제 경험상 아무런 문제도 겪지 않았고, 도입 과정도 순조로웠습니다.",[533,1168,1169],{},"또한 Microsoft가 현재의 전부 아니면 전무(all-or-nothing) 방식 대신 이 정도의 세분화를 달성할 수 있는 네이티브 OU 기반 접근 방식을 도입하기를 바랍니다. 그렇게 되면 폭넓은 도입이 훨씬 쉬워질 것입니다.",[533,1171,1172,1173,1178,1179,1184],{},"AD Tiering에 관한 참고: Exchange 서버에 Domain Admin이나 그 밖의 Tier 0 계정으로 로그온하지 마세요. Exchange 서버는 Tier 1으로 취급하고, 가능한 한 빨리 AD Tiering을 구현하세요. 첫 단계로 AD 보안 상태를 평가하고 컨트롤 경로 노출을 식별하기 위해 ",[557,1174,1177],{"href":1175,"rel":1176},"https://www.pingcastle.com/",[673],"PingCastle"," 또는 ",[557,1180,1183],{"href":1181,"rel":1182},"https://www.semperis.com/purple-knight/",[673],"Purple Knight","를 사용할 것을 권장합니다.",[1186,1187,1188],"style",{},"\ncode {\n  font-size: inherit\n}\n",{"title":1190,"searchDepth":1191,"depth":1191,"links":1192},"",2,[1193,1194,1195,1196,1200,1204],{"id":530,"depth":1191,"text":531},{"id":585,"depth":1191,"text":586},{"id":687,"depth":1191,"text":688},{"id":729,"depth":1191,"text":730,"children":1197},[1198],{"id":740,"depth":1199,"text":741},3,{"id":855,"depth":1191,"text":856,"children":1201},[1202,1203],{"id":905,"depth":1199,"text":906},{"id":1103,"depth":1199,"text":1104},{"id":1163,"depth":1191,"text":1163},"md","post",{"lang":1208,"seoTitle":1209,"titleClass":1210,"date":1211,"blogtitlepic":1212,"socialimg":1213,"customExcerpt":1214,"keywords":1215,"scripts":1216,"asideNav":1217,"maxContent":325,"published":325},"ko","Exchange AD Split Permissions: 최소 권한으로 Active Directory 보호하기","h2-font-size","2026-03-01","head-exchange-ad-split-permissions","/blog/heads/head-exchange-ad-split-permissions.jpg","클라우드로 사서함을 완전히 마이그레이션한 조직조차도 여전히 온프레미스 Exchange 서버를 운영하는 경우가 많으며, 이는 Active Directory에 대한 과소평가된 보안 위험을 함께 가져옵니다. “AD Split Permissions” 모델은 공격자가 전체 도메인 장악에 악용할 수 있는 Exchange의 광범위한 AD 권한을 제거합니다. 지금까지 이 모델의 도입은 관리자에게 강제되는 프로세스 변경 때문에 대부분 실패해 왔습니다. 이 글에서는 바로 그 장벽을 우아하게 넘는 방법을 소개합니다. 관련 OU에만 선택적으로 잃어버린 AD 권한을 다시 부여하는 스크립트를 통해, 익숙한 관리자 워크플로를 유지하면서도 완전한 보안 이점을 달성하는 방법입니다.","Exchange Server, Active Directory, AD split permissions, RBAC, Exchange 권한, AdminSDHolder, 최소 권한, AD ACL, PowerShell",{"slick":325,"form":325},{"menuItems":1218},[1219,1221,1223,1225,1227],{"href":1220,"text":531},"#tldr-단점을-없앤다면",{"href":1222,"text":586},"#왜-지금-중요한가",{"href":1224,"text":688},"#그런데-왜-아무도-하지-않을까",{"href":1226,"text":730},"#후회-없는-방법을-알려드립니다",{"href":1228,"text":1163},"#결론","/posts/2026-03-01-exchange-ad-split-permissions-hardening",{"title":521,"description":1190},"posts/2026-03-01-exchange-ad-split-permissions-hardening","3xunEa4D5NvoQvuu19U82h8wKzEZKzj5FMJixE9RQbA",{"id":1234,"extension":1235,"meta":1236,"stem":8,"__hash__":1586},"authors_data/authors.json","json",{"path":1237,"Fritz Zurhorst":1238,"Alexander Schlindwein":1244,"Sophie Luna":1250,"Nadine Klein":1258,"Karsten Kleinschmidt":1264,"Julian Wendt":1272,"Holger Bunkradt":1277,"Ralf Mania":1283,"Oliver Kieselbach":1289,"Steffen Schwerdtfeger":1295,"Gunnar Winter":1303,"Jan Petersen":1308,"Thorsten Kunzi":1313,"Moritz Pohl":1316,"Thorben Pöschus":1321,"Christoph Hannebauer":1327,"Marco Scheel":1331,"Christopher Brumm":1336,"Florian Klante":1343,"Niklas Bachmann":1348,"Nils Krautkrämer":1353,"Patrick Treptau":1359,"Peter Beckendorf":1364,"Patrick Sobau":1369,"Jörg Wunderlich":1374,"Michael Breither":1378,"Christian Kanja":1383,"Zeba Hoffmann":1389,"Jochen Fröhlich":1394,"Jan Geisbauer":1398,"Gerrit Reinke":1410,"Christian Kordel":1416,"Stephan Wälde":1420,"Carolin Kanja":1425,"Adrian Ritter":1431,"Marvin Bangert":1436,"Thorsten Pickhan":1442,"Christian Lorenz":1448,"Denis Böhm":1453,"Fabian Bader":1458,"Juan Jose Fernandez Perez":1464,"Mahschid Sayyar":1469,"Benjamin Dassow":1474,"Markus Walschburger":1479,"Jonathan Haist":1484,"Daniel Rohregger":1489,"Thomas Naunheim":1494,"Florian Stöckl":1499,"Pascal Asch":1504,"Markus Kättner":1509,"Anna Ulbricht":1516,"Annette Brauns":1523,"body":1529,"title":1585},"/authors",{"display_name":1239,"avatar":1240,"permalink":1241,"linkedin":1242,"imageOffsetTop":1243},"Fritz Zurhorst","people/people-fritz-zurhorst.png","/authors/fritz-zurhorst","friedemann-z","72%",{"display_name":1245,"avatar":1246,"permalink":1247,"twitter":1248,"linkedin":1249},"Alexander Schlindwein","people/people-alexander-rudolph.png","/authors/alexander-schlindwein","AlexanderOnIT","schlindwein-alexander",{"display_name":1251,"avatar":1252,"permalink":1253,"twitter":1254,"linkedin":1255,"imageOffsetLeft":1256,"imageOffsetTop":1257},"Sophie Luna","people/people-sophie-luna.jpg","/authors/sophie-luna","glueckkanjagab","../company/glueckkanja-gab","58%","67%",{"display_name":1259,"avatar":1260,"permalink":1261,"twitter":1262,"linkedin":1263,"imageOffsetTop":1243},"Nadine Klein","people/people-nadine-kern.png","/authors/nadine-kern","nadineausRT","nadine-kern",{"display_name":1265,"avatar":1266,"permalink":1267,"twitter":1268,"linkedin":1269,"imageOffsetTop":1270,"imageOffsetLeft":1271},"Karsten Kleinschmidt","/c_pad,w_800,h_700/people/karsten-kleinschmidt.jpg","/authors/karsten-kleinschmidt","KarstenonIT","karstenkleinschmidt","60%","57%",{"display_name":1273,"avatar":1274,"permalink":1275,"linkedin":1276},"Julian Wendt","people/people-julian-wendt.png","/authors/julian-wendt","julian-wendt",{"display_name":1278,"avatar":1279,"permalink":1280,"linkedin":1281,"twitter":1282},"Holger Bunkradt","people/people-holger-bunkradt.png","/authors/holger-bunkradt","holger-bunkradt-12b5053b","hbunkradt",{"display_name":1284,"avatar":1285,"permalink":1286,"linkedin":1287,"twitter":1288},"Ralf Mania","people/people-ralf-mania.png","/authors/ralf-mania","ralf-mania-146a2757","RaMa1976",{"display_name":1290,"avatar":1291,"permalink":1292,"linkedin":1293,"twitter":1294},"Oliver Kieselbach","people/people-oliver-kieselbach.png","/authors/oliver-kieselbach","oliver-kieselbach-a4a3409","okieselbT",{"display_name":1296,"avatar":1297,"permalink":1298,"linkedin":1299,"twitter":1300,"imageOffsetTop":1301,"imageOffsetLeft":1302},"Steffen Schwerdtfeger","people/people-steffen-schwerdtfeger.png","/authors/steffen-schwerdtfeger","steffen-schwerdtfeger","SteffenAtCloud","79%","51%",{"display_name":1304,"avatar":1305,"permalink":1306,"twitter":1254,"linkedin":1307},"Gunnar Winter","people/people-gunnar-winter.jpg","/authors/gunnar-winter","company/glueckkanja-gab",{"display_name":1309,"avatar":1310,"permalink":1311,"twitter":1254,"linkedin":1312},"Jan Petersen","people/jan-petersen.png","/authors/jan-petersen","jan-petersen-26a901",{"display_name":523,"avatar":1314,"permalink":1315,"twitter":1254,"linkedin":1307,"imageOffsetTop":1243},"people/author-thorsten-kunzi.png","/authors/thorsten-kunzi",{"display_name":1317,"avatar":1318,"permalink":1319,"twitter":1254,"linkedin":1320},"Dr. Moritz Pohl","people/people-moritz-pohl.png","/authors/moritz-pohl","dr-moritz-pohl",{"display_name":1322,"avatar":1323,"permalink":1324,"twitter":1325,"linkedin":1326},"Thorben Pöschus","people/thorben.poeschus.png","/authors/thorben-poeschus","TPO901","thorben-pöschus-624693b7",{"display_name":1328,"avatar":1329,"permalink":1330,"twitter":1254,"linkedin":1307,"imageOffsetTop":1243},"Dr. Christoph Hannebauer","people/people-christoph-hannebauer.png","/authors/christoph-hannebauer",{"display_name":1332,"avatar":1333,"permalink":1334,"twitter":1335,"linkedin":1335},"Marco Scheel","people/people-marco-scheel.png","/authors/marco-scheel","marcoscheel",{"display_name":1337,"avatar":1338,"permalink":1339,"twitter":1340,"linkedin":1341,"imageOffsetTop":1342},"Christopher Brumm","people/people-christopher-brumm.jpg","/authors/christopher-brumm","cbrhh","christopherbrumm","66%",{"display_name":1344,"avatar":1345,"permalink":1346,"linkedin":1347,"twitter":1254},"Florian Klante","people/florian-klante.jpg","/authors/florian-klante","florian-klante-6031b31b",{"display_name":1349,"avatar":1350,"permalink":1351,"linkedin":1352,"twitter":1254},"Niklas Bachmann","people/niklas.bachmann.png","/authors/niklas-bachmann","niklas-bachmann-66a863158",{"display_name":1354,"avatar":1355,"permalink":1356,"twitter":1357,"linkedin":1358},"Nils Krautkrämer","people/nils-krautkraemer.png","/authors/nils-krautkraemer","KrauNils","nils-krautkrämer-8b04bb250",{"display_name":1360,"avatar":1361,"permalink":1362,"linkedin":1363,"twitter":1254},"Patrick Treptau","people/people-patrick-treptau.png","/authors/patrick-traptau","ptreptau",{"display_name":1365,"avatar":1366,"permalink":1367,"linkedin":1368,"twitter":1254,"imageOffsetTop":1243},"Peter Beckendorf","people/peter-beckendorf.png","/authors/peter-beckendorf","peter-beckendorf-29a239b1",{"display_name":1370,"avatar":1371,"permalink":1372,"linkedin":1373,"twitter":1254},"Patrick Sobau","people/patrick-sobau.png","/authors/patrick-sobau","patrick-sobau",{"display_name":1375,"avatar":1376,"permalink":1377,"twitter":1254},"Jörg Wunderlich","people/joerg-wunderlich.png","/authors/joerg-wunderlich",{"display_name":1379,"avatar":1380,"permalink":1381,"twitter":1254,"linkedin":1382},"Michael Breither","people/people-michael-breither.jpg","/authors/michael-breither","michaelbreither",{"display_name":1384,"avatar":1385,"permalink":1386,"twitter":1387,"linkedin":1388},"Christian Kanja","people/people-christian-kanja.png","/authors/christian-kanja","cekageka","christian-kanja",{"display_name":1390,"avatar":1391,"permalink":1392,"linkedin":1393,"twitter":1254},"Zeba Hoffmann","people/zeba-hoffmann.png","/authors/zeba-hoffmann","zebahoffmann",{"display_name":1395,"avatar":1396,"permalink":1397,"twitter":1254,"linkedin":1307},"Jochen Fröhlich","people/people-jochen-froehlich.png","/authors/jochen-froehlich",{"display_name":1399,"avatar":1400,"permalink":1401,"twitter":1402,"linkedin":1402,"imageOffsetTop":1243,"socials":1403},"Jan Geisbauer","people/people-jan-geisbauer-csoc.png","/authors/jan-geisbauer","JanGeisbauer",[1404,1407],{"text":1405,"href":1406},"Blog","https://emptydc.com",{"text":1408,"href":1409},"Podcast","https://hairlessinthecloud.com",{"display_name":1411,"avatar":1412,"permalink":1413,"twitter":1414,"linkedin":1415},"Gerrit Reinke","people/gerrit-reinke.png","/authors/gerrit-reinke","GLWRe","glwr",{"display_name":1417,"avatar":1418,"permalink":1419,"twitter":1254,"linkedin":1307},"Christian Kordel","people/christian-kordel.png","/authors/christian-kordel",{"display_name":1421,"avatar":1422,"permalink":1423,"twitter":1424,"linkedin":1307},"Stephan Wälde","people/people-stephan-waelde.png","/authors/stephan-waelde","stephanwaelde",{"display_name":1426,"avatar":1427,"permalink":1428,"twitter":1429,"linkedin":1430},"Carolin Kanja","people/people-carolin-kanja.jpg","/authors/carolin-kanja","fraukanja","carolin-kanja",{"display_name":1432,"avatar":1433,"permalink":1434,"twitter":1435,"linkedin":1435},"Adrian Ritter","people/people-adrian-ritter.png","/authors/adrian-ritter","adrianritter",{"display_name":1437,"avatar":1438,"permalink":1439,"twitter":1440,"linkedin":1441},"Marvin Bangert","people/people-marvin-bangert.png","/authors/marvin-bangert","marvinbangert","marvin-bangert",{"display_name":1443,"avatar":1444,"permalink":1445,"twitter":1446,"linkedin":1447},"Thorsten Pickhan","people/people-thorsten-pickhan.png","/authors/thorsten-pickhan","tpickhan","thorsten-pickhan",{"display_name":1449,"avatar":1450,"permalink":1451,"linkedin":1452,"twitter":1254},"Christian Lorenz","people/people-christian-lorenz.png","/authors/christian-lorenz","christianlorenz95",{"display_name":1454,"avatar":1455,"permalink":1456,"linkedin":1457,"twitter":1254},"Denis Böhm","people/people-denis-boehm.png","/authors/denis-boehm","denis-böhm-3bb834135",{"display_name":1459,"avatar":1460,"permalink":1461,"linkedin":1462,"twitter":1463},"Fabian Bader","people/people-fabian-bader.jpg","/authors/fabian-bader","fabianbader","fabian_bader",{"display_name":1465,"avatar":1466,"permalink":1467,"linkedin":1468},"Juan Jose Fernandez Perez","people/people-juan-jose-fernandez.jpg","/authors/juan-jose-fernandez-perez","juan-jose-fernandez-perez-8016055",{"display_name":1470,"avatar":1471,"permalink":1472,"linkedin":1473},"Mahschid Sayyar","people/people-mahschid-sayyar.jpg","/authors/mahschid-sayyar","mahschid-sayyar-97544463",{"display_name":1475,"avatar":1476,"permalink":1477,"linkedin":1478},"Benjamin Dassow","people/people-benjamin-dassow.jpg","/authors/benjamin-dassow","benjamin-dassow",{"display_name":1480,"avatar":1481,"permalink":1482,"linkedin":1483},"Markus Walschburger","people/people-markus-walschburger.jpg","/authors/markus-walschburger","markus-walschburger",{"display_name":1485,"avatar":1486,"permalink":1487,"linkedin":1488,"imageOffsetTop":1243},"Jonathan Haist","people/people-jonathan-haist.jpg","/authors/jonathan-haist","jonathanhaist",{"display_name":1490,"avatar":1491,"permalink":1492,"linkedin":1493,"imageOffsetTop":1243},"Daniel Rohregger","people/people-daniel-rohregger.jpg","/authors/daniel-rohregger","drohregger",{"display_name":1495,"avatar":1496,"permalink":1497,"linkedin":1498,"imageOffsetTop":1342},"Thomas Naunheim","people/people-thomas-naunheim.jpg","/authors/thomas-naunheim","thomasnaunheim",{"display_name":1500,"avatar":1501,"permalink":1502,"linkedin":1503,"imageOffsetTop":1342},"Florian Stöckl","people/people-florian-stoeckl.jpg","/authors/florian-stoeckl","florianstoeckl",{"display_name":1505,"avatar":1506,"permalink":1507,"linkedin":1508,"imageOffsetTop":1342},"Pascal Asch","people/Pascal.Asch.648.jpg","/authors/pascal-asch","pascal-asch",{"display_name":1510,"avatar":1511,"permalink":1512,"linkedin":1513,"imageOffsetTop":1514,"imageOffsetLeft":1515},"Markus Kättner","people/markus-kaettner.jpg","/authors/markus-kaettner","markus-kättner-b600119","62%","63%",{"display_name":1517,"avatar":1518,"permalink":1519,"linkedin":1520,"imageOffsetTop":1521,"imageOffsetLeft":1522},"Anna Ulbricht","people/anna-katharina.ulbricht-09.png","/authors/anna-ulbricht","anna-katharina-u-a67702199","70%","50%",{"display_name":1524,"avatar":1525,"permalink":1526,"linkedin":1527,"imageOffsetTop":1528,"imageOffsetLeft":1270},"Annette Brauns","people/Annette-Brauns-8.jpg","/authors/annette-brauns","annette-brauns","95%",{"Fritz Zurhorst":1530,"Alexander Schlindwein":1531,"Sophie Luna":1532,"Nadine Klein":1533,"Karsten Kleinschmidt":1534,"Julian Wendt":1535,"Holger Bunkradt":1536,"Ralf Mania":1537,"Oliver Kieselbach":1538,"Steffen Schwerdtfeger":1539,"Gunnar Winter":1540,"Jan Petersen":1541,"Thorsten Kunzi":1542,"Moritz Pohl":1543,"Thorben Pöschus":1544,"Christoph Hannebauer":1545,"Marco Scheel":1546,"Christopher Brumm":1547,"Florian Klante":1548,"Niklas Bachmann":1549,"Nils Krautkrämer":1550,"Patrick Treptau":1551,"Peter Beckendorf":1552,"Patrick Sobau":1553,"Jörg Wunderlich":1554,"Michael Breither":1555,"Christian Kanja":1556,"Zeba Hoffmann":1557,"Jochen Fröhlich":1558,"Jan Geisbauer":1559,"Gerrit Reinke":1563,"Christian Kordel":1564,"Stephan Wälde":1565,"Carolin Kanja":1566,"Adrian Ritter":1567,"Marvin Bangert":1568,"Thorsten Pickhan":1569,"Christian Lorenz":1570,"Denis Böhm":1571,"Fabian Bader":1572,"Juan Jose Fernandez Perez":1573,"Mahschid Sayyar":1574,"Benjamin Dassow":1575,"Markus Walschburger":1576,"Jonathan Haist":1577,"Daniel Rohregger":1578,"Thomas Naunheim":1579,"Florian Stöckl":1580,"Pascal Asch":1581,"Markus Kättner":1582,"Anna Ulbricht":1583,"Annette Brauns":1584},{"display_name":1239,"avatar":1240,"permalink":1241,"linkedin":1242,"imageOffsetTop":1243},{"display_name":1245,"avatar":1246,"permalink":1247,"twitter":1248,"linkedin":1249},{"display_name":1251,"avatar":1252,"permalink":1253,"twitter":1254,"linkedin":1255,"imageOffsetLeft":1256,"imageOffsetTop":1257},{"display_name":1259,"avatar":1260,"permalink":1261,"twitter":1262,"linkedin":1263,"imageOffsetTop":1243},{"display_name":1265,"avatar":1266,"permalink":1267,"twitter":1268,"linkedin":1269,"imageOffsetTop":1270,"imageOffsetLeft":1271},{"display_name":1273,"avatar":1274,"permalink":1275,"linkedin":1276},{"display_name":1278,"avatar":1279,"permalink":1280,"linkedin":1281,"twitter":1282},{"display_name":1284,"avatar":1285,"permalink":1286,"linkedin":1287,"twitter":1288},{"display_name":1290,"avatar":1291,"permalink":1292,"linkedin":1293,"twitter":1294},{"display_name":1296,"avatar":1297,"permalink":1298,"linkedin":1299,"twitter":1300,"imageOffsetTop":1301,"imageOffsetLeft":1302},{"display_name":1304,"avatar":1305,"permalink":1306,"twitter":1254,"linkedin":1307},{"display_name":1309,"avatar":1310,"permalink":1311,"twitter":1254,"linkedin":1312},{"display_name":523,"avatar":1314,"permalink":1315,"twitter":1254,"linkedin":1307,"imageOffsetTop":1243},{"display_name":1317,"avatar":1318,"permalink":1319,"twitter":1254,"linkedin":1320},{"display_name":1322,"avatar":1323,"permalink":1324,"twitter":1325,"linkedin":1326},{"display_name":1328,"avatar":1329,"permalink":1330,"twitter":1254,"linkedin":1307,"imageOffsetTop":1243},{"display_name":1332,"avatar":1333,"permalink":1334,"twitter":1335,"linkedin":1335},{"display_name":1337,"avatar":1338,"permalink":1339,"twitter":1340,"linkedin":1341,"imageOffsetTop":1342},{"display_name":1344,"avatar":1345,"permalink":1346,"linkedin":1347,"twitter":1254},{"display_name":1349,"avatar":1350,"permalink":1351,"linkedin":1352,"twitter":1254},{"display_name":1354,"avatar":1355,"permalink":1356,"twitter":1357,"linkedin":1358},{"display_name":1360,"avatar":1361,"permalink":1362,"linkedin":1363,"twitter":1254},{"display_name":1365,"avatar":1366,"permalink":1367,"linkedin":1368,"twitter":1254,"imageOffsetTop":1243},{"display_name":1370,"avatar":1371,"permalink":1372,"linkedin":1373,"twitter":1254},{"display_name":1375,"avatar":1376,"permalink":1377,"twitter":1254},{"display_name":1379,"avatar":1380,"permalink":1381,"twitter":1254,"linkedin":1382},{"display_name":1384,"avatar":1385,"permalink":1386,"twitter":1387,"linkedin":1388},{"display_name":1390,"avatar":1391,"permalink":1392,"linkedin":1393,"twitter":1254},{"display_name":1395,"avatar":1396,"permalink":1397,"twitter":1254,"linkedin":1307},{"display_name":1399,"avatar":1400,"permalink":1401,"twitter":1402,"linkedin":1402,"imageOffsetTop":1243,"socials":1560},[1561,1562],{"text":1405,"href":1406},{"text":1408,"href":1409},{"display_name":1411,"avatar":1412,"permalink":1413,"twitter":1414,"linkedin":1415},{"display_name":1417,"avatar":1418,"permalink":1419,"twitter":1254,"linkedin":1307},{"display_name":1421,"avatar":1422,"permalink":1423,"twitter":1424,"linkedin":1307},{"display_name":1426,"avatar":1427,"permalink":1428,"twitter":1429,"linkedin":1430},{"display_name":1432,"avatar":1433,"permalink":1434,"twitter":1435,"linkedin":1435},{"display_name":1437,"avatar":1438,"permalink":1439,"twitter":1440,"linkedin":1441},{"display_name":1443,"avatar":1444,"permalink":1445,"twitter":1446,"linkedin":1447},{"display_name":1449,"avatar":1450,"permalink":1451,"linkedin":1452,"twitter":1254},{"display_name":1454,"avatar":1455,"permalink":1456,"linkedin":1457,"twitter":1254},{"display_name":1459,"avatar":1460,"permalink":1461,"linkedin":1462,"twitter":1463},{"display_name":1465,"avatar":1466,"permalink":1467,"linkedin":1468},{"display_name":1470,"avatar":1471,"permalink":1472,"linkedin":1473},{"display_name":1475,"avatar":1476,"permalink":1477,"linkedin":1478},{"display_name":1480,"avatar":1481,"permalink":1482,"linkedin":1483},{"display_name":1485,"avatar":1486,"permalink":1487,"linkedin":1488,"imageOffsetTop":1243},{"display_name":1490,"avatar":1491,"permalink":1492,"linkedin":1493,"imageOffsetTop":1243},{"display_name":1495,"avatar":1496,"permalink":1497,"linkedin":1498,"imageOffsetTop":1342},{"display_name":1500,"avatar":1501,"permalink":1502,"linkedin":1503,"imageOffsetTop":1342},{"display_name":1505,"avatar":1506,"permalink":1507,"linkedin":1508,"imageOffsetTop":1342},{"display_name":1510,"avatar":1511,"permalink":1512,"linkedin":1513,"imageOffsetTop":1514,"imageOffsetLeft":1515},{"display_name":1517,"avatar":1518,"permalink":1519,"linkedin":1520,"imageOffsetTop":1521,"imageOffsetLeft":1522},{"display_name":1524,"avatar":1525,"permalink":1526,"linkedin":1527,"imageOffsetTop":1528,"imageOffsetLeft":1270},"Authors","1csawlkJxRljy93GTOnXEkwLqAv9Lcj-apxRvoodAOY",{"list":1588,"authors":1805},[1589,1607,1621,1635,1651,1664,1677,1690,1702,1718,1732,1747,1765,1776,1789],{"id":1590,"title":1591,"author":1592,"cta":494,"description":1190,"hideInRecent":484,"layout":1206,"meta":1593,"moment":1599,"path":1600,"stem":1601,"tags":1602,"webcast":484},"content_ko/posts/2026-09-22-end-of-mfa-sms.md","MFA SMS의 종말",[1265],{"lang":1208,"date":1594,"categories":1595,"blogtitlepic":1597,"customExcerpt":1598},"2026-09-21",[1596],"Security","head-conditional-access.jpg","기업이 지금 피싱에 강하고 가능한 한 비밀번호 없는 인증 방식으로 전환해야 하는 이유.","2026-09-22","/posts/2026-09-22-end-of-mfa-sms","posts/2026-09-22-end-of-mfa-sms",[1596,1603,1604,1605,1606],"Authentication","Microsoft Entra ID","MFA","Passkeys",{"id":1608,"title":1609,"author":1610,"cta":494,"description":1190,"hideInRecent":484,"layout":1206,"meta":1611,"moment":1594,"path":1615,"stem":1616,"tags":1617,"webcast":484},"content_ko/posts/2026-09-21-clickfix-prevent-detect.md","ClickFix. 사용자가 곧 익스플로잇일 때, 그리고 이를 멈추는 방법",[1239,1259],{"lang":1208,"date":1594,"categories":1612,"blogtitlepic":1613,"customExcerpt":1614},[1596],"head-clickfix.jpg","ClickFix는 사용자를 자기 자신의 공격자로 만듭니다. 가짜 CAPTCHA 하나, 복사·붙여넣기 한 번으로 악성 코드가 메모리에서 실행되고, 디스크에는 아무것도 남지 않습니다. Microsoft Defender가 이 공격을 어떻게 탐지하는지, 탐지가 어디서 한계에 부딪히는지, 그리고 RunMRU 헌트와 네 개의 보호 레이어로 그 공백을 어떻게 메우는지 살펴봅니다.","/posts/2026-09-21-clickfix-prevent-detect","posts/2026-09-21-clickfix-prevent-detect",[1618,1619,1620],"Defender","SOC","Endpoint Security",{"id":1622,"title":1623,"author":1624,"cta":494,"description":1190,"hideInRecent":484,"layout":1206,"meta":1625,"moment":1594,"path":1629,"stem":1630,"tags":1631,"webcast":484},"content_ko/posts/2026-09-21-red-tenant-dark-tenant-cio.md","관리 업무와 일상 업무를 한 컴퓨터에서? Game Over.",[1399],{"lang":1208,"date":1594,"categories":1626,"blogtitlepic":1627,"customExcerpt":1628},[1596],"head-game-over-en.jpg","CIO에게 테넌트 하나로는 충분하지 않은 이유, 그리고 두 번째 테넌트가 좀처럼 함께 고려되지 않는 이유입니다. Managed Red Tenant는 관리 업무를 오피스 환경으로부터 아키텍처 차원에서 분리하고, Managed Dark Tenant는 방어가 무너졌을 때도 기업이 계속 움직일 수 있게 합니다. 이것이 운영 모델과 SOC 신호, 그리고 NISG 2026에 따른 입증 의무에 어떤 의미를 갖는지 살펴봅니다.","/posts/2026-09-21-red-tenant-dark-tenant-cio","posts/2026-09-21-red-tenant-dark-tenant-cio",[1596,1632,1633,1634],"Privileged Access","Zero Trust","NIS2",{"id":1636,"title":1637,"author":1638,"cta":494,"description":1639,"hideInRecent":484,"layout":1206,"meta":1640,"moment":1641,"path":1646,"stem":1647,"tags":1648,"webcast":484},"content_ko/posts/2026-08-08-isg-germany-2026.md","네 번의 Leader. ISG 독일 연구 2026 속 glueckkanja",[1426],"ISG는 올해 연구의 이름을 바꿨습니다. Microsoft Cloud Ecosystem은 Microsoft AI and Cloud Ecosystem이 되었고, 이름과 함께 기준도 옮겨 갔습니다. 이제 평가 대상은 누가 Microsoft 플랫폼을 도입하는지가 아니라, 누가 Copilot과 에이전트, AI 워크로드를 통제 가능하게 운영하는지입니다. 새로운 기준은 저희의 위치를 바꾸지 않았습니다. ISG Provider Lens® 연구 독일 2026은 저희를 네 개 사분면의 Leader로 포지셔닝합니다. Microsoft Productivity and Business Process Services와 Azure Managed Services에서 각각 Large Market과 Mid Market입니다. 2021년, 2023년, 2024년, 2025년에 이어 독일에서 다섯 번째 Leader 등급이며, 스위스에서는 2주 전에 Leader 사분면으로의 도약이 있었습니다.",{"lang":1208,"date":1641,"categories":1642,"blogtitlepic":1644,"customExcerpt":1645},"2026-08-08",[1643],"Corporate","head-isg-de-2026.png","ISG Provider Lens® 연구 2026은 독일에서 glueckkanja를 네 개 사분면의 Leader로 포지셔닝했습니다. Microsoft Productivity and Business Process Services와 Azure Managed Services에서 각각 Large Market과 Mid Market입니다. 연구의 이름은 이제 Microsoft AI and Cloud Ecosystem이 되었고, 기준도 옮겨 갔습니다. 평가 대상은 AI와 에이전트 워크로드를 통제 가능하게 운영하는 곳입니다.","/posts/2026-08-08-isg-germany-2026","posts/2026-08-08-isg-germany-2026",[1649,1650],"Award","ISG",{"id":1652,"title":1653,"author":1654,"cta":494,"description":1655,"hideInRecent":484,"layout":1206,"meta":1656,"moment":1657,"path":1661,"stem":1662,"tags":1663,"webcast":484},"content_ko/posts/2026-07-31-isg-switzerland-2026.md","Rising Star에서 Leader로. ISG 스위스 연구 2026 속 glueckkanja",[1426],"2024년 저희는 glueckkanja Switzerland AG를 설립하고 베른 Bahnhofplatz 10b의 zentroom에 사무실을 마련했습니다. 2025년 ISG는 스위스 시장에서 저희를 Rising Star로 분류했습니다. 애널리스트들이 Leader 사분면으로 도약할 것으로 보는 공급업체라는 뜻이었습니다. 이제 그 도약이 기록되었습니다. ISG Provider Lens® 연구 2026은 스위스에서 저희를 Microsoft AI and Cloud Ecosystem 사분면의 Leader로, Azure Managed Services와 Microsoft Productivity and Business Process Services 영역에서 포지셔닝했습니다.",{"lang":1208,"date":1657,"categories":1658,"blogtitlepic":1659,"customExcerpt":1660},"2026-07-31",[1643],"head-isg-ch-2026.png","ISG Provider Lens® 연구 2026은 스위스에서 glueckkanja를 Microsoft AI and Cloud Ecosystem 사분면의 Leader로, Azure Managed Services와 Microsoft Productivity and Business Process Services 영역에서 포지셔닝했습니다. 베른 시장 진출 2년 만에, Rising Star 선정 1년 만의 일입니다.","/posts/2026-07-31-isg-switzerland-2026","posts/2026-07-31-isg-switzerland-2026",[1649,1650],{"id":1665,"title":1666,"author":1667,"cta":494,"description":1190,"hideInRecent":484,"layout":1206,"meta":1668,"moment":1669,"path":1673,"stem":1674,"tags":1675,"webcast":484},"content_ko/posts/2026-07-24-outbreak-openai-hugging-face.md","Outbreak. OpenAI/Hugging Face 사건이 말해 주는 것과 말해 주지 않는 것",[1399],{"lang":1208,"date":1669,"categories":1670,"blogtitlepic":1671,"customExcerpt":1672},"2026-07-24",[1596],"head-outbreak.jpg","AI 에이전트가 자신의 테스트 환경에서 탈출해 제로데이를 찾아내고 다른 기업을 해킹했습니다. 각본처럼 들리지만 2026년 7월에 실제로 일어난 일입니다. 이제 차분하게 자리를 잡아 볼 시간입니다. 약간의 심리학, 두 명의 보안 베테랑, 그리고 이것이 여러분의 방어에 무엇을 의미하는지에 대한 질문과 함께.","/posts/2026-07-24-outbreak-openai-hugging-face","posts/2026-07-24-outbreak-openai-hugging-face",[1676,1619,1633],"AI",{"id":1678,"title":1679,"author":1680,"cta":494,"description":1681,"hideInRecent":484,"layout":1206,"meta":1682,"moment":1683,"path":1687,"stem":1688,"tags":1689,"webcast":484},"content_ko/posts/2026-07-22-isg-cybersecurity-2026.md","Leader 그리고 Rising Star. ISG 사이버보안 연구 2026 속 glueckkanja",[1426],"사분면에 새로 진입해 곧바로 Leader가 되었습니다. ISG Provider Lens® 연구 \"Cybersecurity – Services and Solutions 2026\"은 glueckkanja를 독일 중견·중소기업을 위한 Next-Gen SOC/MDR Services 영역의 Leader로 포지셔닝했습니다. Next-Gen SOC/MDR Services 전체 시장에서 ISG는 저희를 Rising Star로 선정했습니다. 즉, 애널리스트들이 향후 12~24개월 안에 Leader 사분면으로 도약할 것으로 보는 공급업체라는 뜻입니다.",{"lang":1208,"date":1683,"categories":1684,"blogtitlepic":1685,"customExcerpt":1686},"2026-07-22",[1643],"head-isg-cybersecurity-2026.png","ISG Provider Lens® 연구 Cybersecurity 2026이 glueckkanja를 Next-Gen SOC/MDR Services(Midmarket) 사분면의 Leader로 선정했습니다. Next-Gen SOC/MDR Services 전체 시장에서는 저희가 Rising Star입니다. ISG는 저희의 시장 평균을 웃도는 성장, 깊은 Microsoft 보안 전문성, 그리고 독일에서 운영되는 24/7 SOC를 인정했습니다.","/posts/2026-07-22-isg-cybersecurity-2026","posts/2026-07-22-isg-cybersecurity-2026",[1649,1650,1596],{"id":1691,"title":1692,"author":1693,"cta":494,"description":1694,"hideInRecent":484,"layout":1206,"meta":1695,"moment":1696,"path":1699,"stem":1700,"tags":1701,"webcast":484},"content_ko/posts/2026-07-06-the-holy-trinity.md","The Holy Trinity: AI가 실제로 일하려면 무엇이 필요한가",[1426],"어느 제조 기업이 자사의 SKU 14,000개 중 실제로 수익을 내는 것이 무엇인지 알고 싶어 합니다. 그 답은 단 하나의 데이터 포인트도 서로 주고받은 적이 없는 세 개의 시스템에 흩어져 있습니다. 얼마 전까지만 해도 그 답을 얻는 데는 세 개 부서와 2주, 그리고 상당한 선의가 필요했습니다. 2026년 초부터는 AI가 이 질문에 몇 분 안에 답할 수 있습니다. 데이터를 뒤지고, 연관 관계를 만들고, 권고안을 내놓는 것입니다. 단, AI가 접근할 수 있다는 전제에서입니다.",{"lang":1208,"date":1696,"categories":1697,"blogtitlepic":1698},"2026-07-06",[131],"head-the-holy-trinity","/posts/2026-07-06-the-holy-trinity","posts/2026-07-06-the-holy-trinity",[1676,131],{"id":1703,"title":1704,"author":1705,"cta":494,"description":1706,"hideInRecent":484,"layout":1206,"meta":1707,"moment":1708,"path":1712,"stem":1713,"tags":1714,"webcast":484},"content_ko/posts/2026-07-01-onboarding-process.md","계약서에 서명하셨습니다. 저희 온보딩은 이렇게 진행됩니다",[1517],"온보딩은 실제로 어떻게 진행되나요? 지원자들과 이야기를 나누다 보면 거듭 마주치는 질문입니다. 온보딩이 삐걱대며 흘러가는 경험을 이미 해 본 분이 많기 때문입니다. 그래서 저희는 처음부터 여러분이 좋은 느낌을 받으실 수 있도록 하는 것을 더욱 중요하게 생각합니다.",{"lang":1208,"date":1708,"categories":1709,"blogtitlepic":1710,"customExcerpt":1711},"2026-07-01",[1643],"Onboarding_Blogheader","계약서에 서명을 마쳤고, 가장 큰 첫걸음은 이미 내디뎠습니다. 그렇다면 이제 어떻게 될까요? PreBoarding부터 팀에서 보내는 첫 주까지, 저희 온보딩의 무대 뒤로 여러분을 안내합니다.","/posts/2026-07-01-onboarding-process","posts/2026-07-01-onboarding-process",[1715,1716,1717],"Employer Branding","Onboarding","Unternehmenskultur",{"id":1719,"title":1720,"author":1721,"cta":494,"description":1722,"hideInRecent":484,"layout":1206,"meta":1723,"moment":1724,"path":1728,"stem":1729,"tags":1730,"webcast":484},"content_ko/posts/2026-06-26-frontier-partner.md","Microsoft Frontier Partner: 우리는 그 일원입니다",[1426],"Microsoft 파트너 생태계에는 다양한 인증이 존재하지만, Frontier Partner Badge는 그 구조 자체에서 다른 인증들과 구별됩니다. 이 배지는 신청할 수 있는 것이 아니라, Microsoft의 주도로 극소수의 파트너에게만 부여되며, 대상 파트너는 한 가지 분야에서 두각을 나타내는 것이 아니라 여러 분야에서 동시에 역량을 입증해야 합니다. 이때 Microsoft는 Cloud & AI Platforms, AI Business Solutions, Security 세 영역에서 입증된 역량을 동일한 비중으로 검증하며, 이를 통해 AI를 기존 IT 위에 얹는 부가물로 이해하는 것이 아니라 아이덴티티에서 엔드포인트를 거쳐 실제 운영 중인 AI까지 이어지는 일관된 아키텍처의 결과로 이해하는 기업을 대상으로 삼습니다.",{"lang":1208,"date":1724,"categories":1725,"blogtitlepic":1726,"customExcerpt":1727},"2026-06-26",[1643],"head-frontier-partner-badge.jpg","얼마 전 Microsoft AI Cloud Partner Program에 새로운 최고 등급의 인증인 Frontier Partner Badge가 도입되었습니다. Microsoft는 이 배지를 전 세계에서 극소수의 파트너에게만 부여하는데, 이들은 업무 환경에서 클라우드 플랫폼과 보안을 거쳐 AI 애플리케이션 자체에 이르기까지 Microsoft 스택 전반에서 AI 프로젝트를 지속 가능하게 제공하며, 이러한 역량을 실제 현장에서 입증한 파트너입니다. DACH 지역에서 이 그룹에 속하는 기업은 손에 꼽을 정도이며, 우리는 그중 하나입니다.","/posts/2026-06-26-frontier-partner","posts/2026-06-26-frontier-partner",[1649,1731,1676],"Microsoft Partner",{"id":1733,"title":1734,"author":1735,"cta":494,"description":1736,"hideInRecent":484,"layout":1206,"meta":1737,"moment":1738,"path":1742,"stem":1743,"tags":1744,"webcast":484},"content_ko/posts/2026-06-09-vair-run.md","좋은 뜻을 위한 160킬로미터",[1524],"일요일 아침 8시 30분, 마인강 변 Holbeinsteg. 통일된 NinjaCat 셔츠를 입은 열한 명의 동료가 Frankfurter Runden을 준비하고 있습니다. 비, 번개, 천둥까지 함께였습니다. 좋은 뜻을 위해 달린다는 것은, 궂은 날씨에도 러닝화 끈을 조여 매기에 충분한 동기였습니다.",{"lang":1208,"date":1738,"categories":1739,"blogtitlepic":1740,"customExcerpt":1741},"2026-06-08",[1643],"frankfurter-runden.png","열한 명의 동료, 16바퀴, 160킬로미터, 뇌우 한 차례 그리고 시상대 입상: glueckkanja는 Frankfurter Runden 2026에 참가했고, 달린 한 바퀴마다 Offenbach에 포용적인 스포츠·문화 공원을 짓고 있는 VAIR e.V.에 기부했습니다.","/posts/2026-06-09-vair-run","posts/2026-06-09-vair-run",[1745,1715,1746],"Top Arbeitgeber","Soziales Engagement",{"id":1748,"title":1749,"author":1750,"cta":494,"description":1751,"hideInRecent":484,"layout":1206,"meta":1752,"moment":1753,"path":1757,"stem":1758,"tags":1759,"webcast":484},"content_ko/posts/2026-04-10-incident-to-intelligence.md","알려지지 않은 AMOS 스틸러의 해부: 알림에서 몇 시간 만에 면역까지",[1505],"우리 SOC에서 알림이 발생하면 시계가 돌아가기 시작합니다. 해당 고객뿐 아니라 우리 보호 아래에 있는 모든 조직에 대해서 말입니다. 현대 위협 환경에서 가장 위험한 순간은 인텔리전스 갭(Intelligence Gap), 즉 새로운 멀웨어 변종이 처음 사용된 시점과 업계가 그것을 알게 되는 날 사이의 시간 창입니다.",{"lang":1208,"date":1753,"categories":1754,"blogtitlepic":1755,"customExcerpt":1756},"2026-04-10",[1596],"head-amos-stealer.png","지금까지 문서화되지 않은 AMOS 스틸러 변종이 macOS 엔드포인트를 침해했습니다. 알려진 해시도, 공개 데이터베이스의 C2 데이터도 없었습니다. 우리 SOC는 여섯 겹의 난독화 계층을 해체하고 모든 지표를 추출한 뒤, 업계가 이 샘플을 미처 보기도 전에 몇 시간 만에 모든 SOC 고객에게 보호를 배포했습니다.","/posts/2026-04-10-incident-to-intelligence","posts/2026-04-10-incident-to-intelligence",[1760,1761,1762,1763,1764],"Threat Intelligence","Incident Response","macOS Security","Malware Analysis","Cyber Security Operations Center",{"id":1766,"title":1767,"author":1768,"cta":494,"description":1769,"hideInRecent":484,"layout":1206,"meta":1770,"moment":1771,"path":1774,"stem":1775,"tags":494,"webcast":484},"content_ko/posts/2026-03-21-microsoft-edge-corporate-browser.md","Edge가 유일한 Corporate Browser여야 하는 이유",[1296],"기업 환경에서 브라우저의 선택은 전략적 결정입니다. 이는 실제로 얼마나 많은 보안과 관리 부담을 갖게 되는지에 직접적인 영향을 미칩니다. Google Chrome은 오랫동안 당연한 선택지였지만, Microsoft Edge는 특히 Microsoft 365가 사용되고 관리가 Intune을 통해 이루어지는 경우 기존 스택에 직접 연결되는 브라우저로 발전했습니다.",{"lang":1208,"date":1771,"blogtitlepic":1772,"customExcerpt":1773},"2026-03-21","head-microsoft-edge-default-browser.jpg","Chrome를 진정으로 선택한 기업은 없습니다. 그저 그 자리에 있었을 뿐이며, 자체 동기화 로직과 자체 계정 관리, 자체 정책 인터페이스를 가지고 있었습니다. 반면 Microsoft Edge는 이미 가동 중인 인프라, 즉 Entra ID, Intune, Defender에 직접 연결됩니다. 이 글에서는 전환이 어떤 모습인지, Chrome을 Intune 정책으로 어떻게 랜딩 페이지로 리디렉션하는지, 그리고 두 개의 브라우저를 병행 운영하는 것을 멈추면 무엇이 사라지는지를 보여드립니다.","/posts/2026-03-21-microsoft-edge-corporate-browser","posts/2026-03-21-microsoft-edge-corporate-browser",{"id":1777,"title":1778,"author":1779,"cta":494,"description":1780,"hideInRecent":484,"layout":1206,"meta":1781,"moment":1782,"path":1786,"stem":1787,"tags":1788,"webcast":484},"content_ko/posts/2026-03-20-stryker-attack-intune-privilege.md","관리자 계정 하나면 충분했습니다.",[1399],"2026년 3월 11일 수요일. 79개국의 Stryker 사무실 직원들은 컴퓨터를 켰고, 화면이 비어 있는 것을 발견했습니다. 로그인 화면은 하나의 로고로 대체되어 있었습니다. 회사 노트북, 업무용 휴대폰, 그리고 회사의 BYOD 프로그램에 등록된 개인 기기까지 모두 동시에, 하룻밤 사이에 초기화되었습니다. 랜섬웨어도, 멀웨어 시그니처도, 엔드포인트 탐지 도구가 잡아낼 수 있었던 그 어떤 것도 없었습니다.",{"lang":1208,"date":1782,"categories":1783,"blogtitlepic":1784,"customExcerpt":1785},"2026-03-20",[1596],"head-stryker.jpg","2026년 3월 11일, Handala는 79개국의 기기를 초기화했고, 그 모든 것에 필요했던 것은 침해된 Intune 관리자 계정 하나였습니다. 멀웨어도, 익스플로잇도 없었고, 오직 정당한 관리 도구가 그 소유자를 겨냥했을 뿐입니다. 무슨 일이 있었는지, 왜 그것이 통했는지, 그리고 어떤 두 가지 아키텍처 허점을 막아야 하는지 살펴봅니다.","/posts/2026-03-20-stryker-attack-intune-privilege","posts/2026-03-20-stryker-attack-intune-privilege",[71,1632,1633],{"id":1790,"title":1791,"author":1792,"cta":494,"description":1793,"hideInRecent":484,"layout":1206,"meta":1794,"moment":1795,"path":1799,"stem":1800,"tags":1801,"webcast":484},"content_ko/posts/2026-03-16-ai-agent-hackathon.md","여섯 개의 Agent. 4주. 실제 운영.",[1426],"여러분의 IT 부서는 Agent가 몇 분이면 처리할 수 있는 작업에 매주 몇 시간을 쓰고 있습니까?",{"lang":1208,"date":1795,"categories":1796,"blogtitlepic":1797,"customExcerpt":1798},"2026-03-16",[1643],"head-ai-agent-hackathon.jpg","여섯 개 기업, 4주간의 구축 단계, 여섯 개의 실제로 작동하는 AI Agent. 이것이 첫 번째 glueckkanja AI Agent 해커톤이었습니다. Kiekert, Dr. Oetker, Eckes-Granini, igefa 그리고 lila logistik은 Copilot Studio에서 오늘날 실제로 운영되는 Agent를 구축했습니다. 그 과정에서 무엇이 만들어졌고 이 포맷이 어떻게 작동하는지 소개합니다.","/posts/2026-03-16-ai-agent-hackathon","posts/2026-03-16-ai-agent-hackathon",[1676,1802,1803,1804],"Copilot Studio","Hackathon","AI Agents",{"Karsten Kleinschmidt":1806,"Fritz Zurhorst":1807,"Nadine Klein":1808,"Jan Geisbauer":1809,"Carolin Kanja":1813,"Anna Ulbricht":1814,"Annette Brauns":1815,"Pascal Asch":1816,"Steffen Schwerdtfeger":1817},{"display_name":1265,"avatar":1266,"permalink":1267,"twitter":1268,"linkedin":1269,"imageOffsetTop":1270,"imageOffsetLeft":1271},{"display_name":1239,"avatar":1240,"permalink":1241,"linkedin":1242,"imageOffsetTop":1243},{"display_name":1259,"avatar":1260,"permalink":1261,"twitter":1262,"linkedin":1263,"imageOffsetTop":1243},{"display_name":1399,"avatar":1400,"permalink":1401,"twitter":1402,"linkedin":1402,"imageOffsetTop":1243,"socials":1810},[1811,1812],{"text":1405,"href":1406},{"text":1408,"href":1409},{"display_name":1426,"avatar":1427,"permalink":1428,"twitter":1429,"linkedin":1430},{"display_name":1517,"avatar":1518,"permalink":1519,"linkedin":1520,"imageOffsetTop":1521,"imageOffsetLeft":1522},{"display_name":1524,"avatar":1525,"permalink":1526,"linkedin":1527,"imageOffsetTop":1528,"imageOffsetLeft":1270},{"display_name":1505,"avatar":1506,"permalink":1507,"linkedin":1508,"imageOffsetTop":1342},{"display_name":1296,"avatar":1297,"permalink":1298,"linkedin":1299,"twitter":1300,"imageOffsetTop":1301,"imageOffsetLeft":1302},{"id":1234,"extension":1235,"meta":1819,"stem":8,"__hash__":1586},{"Thorsten Kunzi":1820},{"display_name":523,"avatar":1314,"permalink":1315,"twitter":1254,"linkedin":1307,"imageOffsetTop":1243},1791383940159]